{"schemaVersion":3,"id":"CVE-2006-3810","aliases":["DEBIAN-CVE-2006-3810"],"status":"published","duplicateOf":null,"title":null,"description":"Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.","dates":{"published":"2006-07-27T20:00:00.000Z","modified":"2024-08-07T18:48:37.995Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03377,"percentile":0.8862,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03377},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03377,"percentile":0.8862}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03377,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03377,"percentile":0.8862}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"debian","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/thunderbird","purlType":"deb","versions":[{"text":"< 1.5.0.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.5-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"1.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.0.1 | 1.0.2","eol":null,"hubHref":"/vendor/mozilla/seamonkey"},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5 | 1.5.0.2 | 1.5.0.4","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/21243","label":"secunia.com/advisories/21243","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0608.html","label":"www.redhat.com/support/errata/RHSA-2006-0608.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.debian.org/security/2006/dsa-1160","label":"www.debian.org/security/2006/dsa-1160","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-02.xml","label":"security.gentoo.org/glsa/glsa-200608-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10113","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10113","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:145","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:145","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.kb.cert.org/vuls/id/911004","label":"www.kb.cert.org/vuls/id/911004","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/19181","label":"www.securityfocus.com/bid/19181","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch"]},{"url":"http://secunia.com/advisories/22055","label":"secunia.com/advisories/22055","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/2998","label":"www.vupen.com/english/advisories/2006/2998","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-54.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-54.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/441333/100/0/threaded","label":"www.securityfocus.com/archive/1/441333/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/21529","label":"secunia.com/advisories/21529","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21216","label":"secunia.com/advisories/21216","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml","label":"www.gentoo.org/security/en/glsa/glsa-200608-03.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0594.html","label":"www.redhat.com/support/errata/RHSA-2006-0594.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21336","label":"secunia.com/advisories/21336","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/3749","label":"www.vupen.com/english/advisories/2006/3749","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0610.html","label":"www.redhat.com/support/errata/RHSA-2006-0610.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21654","label":"secunia.com/advisories/21654","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016588","label":"securitytracker.com/id?1016588","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://usn.ubuntu.com/329-1/","label":"usn.ubuntu.com/329-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:146","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:146","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0609.html","label":"rhn.redhat.com/errata/RHSA-2006-0609.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/22210","label":"secunia.com/advisories/22210","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21634","label":"secunia.com/advisories/21634","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21607","label":"secunia.com/advisories/21607","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1016586","label":"securitytracker.com/id?1016586","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/19873","label":"secunia.com/advisories/19873","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21262","label":"secunia.com/advisories/21262","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21532","label":"secunia.com/advisories/21532","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21270","label":"secunia.com/advisories/21270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://usn.ubuntu.com/327-1/","label":"usn.ubuntu.com/327-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/21361","label":"secunia.com/advisories/21361","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21631","label":"secunia.com/advisories/21631","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","label":"www.securityfocus.com/archive/1/446657/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://secunia.com/advisories/21275","label":"secunia.com/advisories/21275","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21246","label":"secunia.com/advisories/21246","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html","label":"www.novell.com/linux/security/advisories/2006_48_seamonkey.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/21229","label":"secunia.com/advisories/21229","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016587","label":"securitytracker.com/id?1016587","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0611.html","label":"www.redhat.com/support/errata/RHSA-2006-0611.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/21228","label":"secunia.com/advisories/21228","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21250","label":"secunia.com/advisories/21250","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-350-1","label":"www.ubuntu.com/usn/usn-350-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/21358","label":"secunia.com/advisories/21358","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://issues.rpath.com/browse/RPL-536","label":"issues.rpath.com/browse/RPL-536","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"https://issues.rpath.com/browse/RPL-537","label":"issues.rpath.com/browse/RPL-537","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21269","label":"secunia.com/advisories/21269","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://security.gentoo.org/glsa/glsa-200608-04.xml","label":"security.gentoo.org/glsa/glsa-200608-04.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/21343","label":"secunia.com/advisories/21343","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:143","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:143","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/22065","label":"secunia.com/advisories/22065","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.ubuntu.com/usn/usn-354-1","label":"www.ubuntu.com/usn/usn-354-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27991","label":"exchange.xforce.ibmcloud.com/vulnerabilities/27991","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.debian.org/security/2006/dsa-1159","label":"www.debian.org/security/2006/dsa-1159","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-3810","label":"security-tracker.debian.org/tracker/CVE-2006-3810","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1159","RHSA-2006:0608","RHSA-2006:0609","RHSA-2006:0610","RHSA-2006:0611"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-07-27T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T18:48:37.995Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T00:10:21.366Z","stale":false,"partial":false}}